Unrated severityNVD Advisory· Published Apr 23, 2018· Updated Sep 17, 2024
CVE-2018-4847
CVE-2018-4847
Description
A vulnerability has been identified in SIMATIC WinCC OA Operator iOS App (All versions < V1.4). Insufficient protection of sensitive information (e.g. session key for accessing server) in Siemens WinCC OA Operator iOS app could allow an attacker with physical access to the mobile device to read unencrypted data from the app's directory. Siemens provides mitigations to resolve the security issue.
Affected products
2- Range: <1.4
- Siemens AG/SIMATIC WinCC OA Operator iOS Appv5Range: All versions < V1.4
Patches
Vulnerability mechanics
References
2- www.securityfocus.com/bid/103941mitrevdb-entryx_refsource_BID
- cert-portal.siemens.com/productcert/pdf/ssa-597741.pdfmitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.